Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/d568ed-1780-4d60-a6f7-5a8360dea3a3/1/sdLmgf8j3d89UXhY4cZKHa0phyk.mft
File: sdLmgf8j3d89UXhY4cZKHa0phyk.mft (raw, json)
Hash identifier: 1qtvZHtZVWzeqB1nNXTCOlngW8Ii1sR+Bounz9/lS30=
Subject key identifier: 9F:C6:FD:36:73:1C:CB:A7:96:BA:B3:65:03:C3:07:54:31:9F:42:3E
Authority key identifier: B1:D2:E6:81:FF:23:DD:DF:3D:51:78:58:E1:C6:4A:1D:AD:29:87:29
Certificate issuer: /CN=b1d2e681ff23dddf3d517858e1c64a1dad298729
Certificate serial: 01983DCF59DF16AD85F10273776C3CBC543D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sdLmgf8j3d89UXhY4cZKHa0phyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/d568ed-1780-4d60-a6f7-5a8360dea3a3/1/sdLmgf8j3d89UXhY4cZKHa0phyk.mft
Manifest number: 1448
Signing time: Thu 24 Jul 2025 19:00:55 +0000
Manifest this update: Thu 24 Jul 2025 19:00:55 +0000
Manifest next update: Fri 25 Jul 2025 19:00:55 +0000
Files and hashes: 1: hDoqXFR8UibPRuqFY2xn-m_-15I.roa (hash: qknu8HOpVZZ1hKraF3WMV/fgLgKt1U80KJN/d09ixdI=)
2: sdLmgf8j3d89UXhY4cZKHa0phyk.crl (hash: GFb4dU05fwiaXMGLTJZaVWChGBeOldD9JNBgYHLpfQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/d568ed-1780-4d60-a6f7-5a8360dea3a3/1/sdLmgf8j3d89UXhY4cZKHa0phyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/d568ed-1780-4d60-a6f7-5a8360dea3a3/1/sdLmgf8j3d89UXhY4cZKHa0phyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sdLmgf8j3d89UXhY4cZKHa0phyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 14:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3d:cf:59:df:16:ad:85:f1:02:73:77:6c:3c:bc:54:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1d2e681ff23dddf3d517858e1c64a1dad298729
Validity
Not Before: Jul 24 19:00:55 2025 GMT
Not After : Jul 25 19:00:55 2025 GMT
Subject: CN=9fc6fd36731ccba796bab36503c30754319f423e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:20:85:41:f8:0c:95:f1:a5:60:84:4e:18:a2:
7f:4b:62:f5:33:a6:0a:14:9c:74:3b:92:32:8e:4f:
4d:c8:0c:e4:3f:89:9d:60:2c:13:30:87:aa:87:2b:
88:cf:91:28:42:03:2f:c1:7c:5a:31:65:38:49:53:
66:f6:4c:4b:07:b6:20:2a:0c:b3:fc:27:48:6e:e8:
a2:31:72:9d:a1:72:35:fa:88:4f:21:89:b1:fa:6b:
75:7c:9f:58:68:40:0b:8d:31:18:97:38:ad:89:a8:
3f:3e:f9:68:f2:95:5d:8e:f2:95:80:fc:f9:e2:a6:
b2:53:16:79:16:9f:88:a1:2f:5d:da:93:bc:ed:ed:
fa:15:6a:7d:07:bd:ae:f5:46:f4:d1:e5:c1:8c:4b:
4e:5c:df:bc:d9:10:27:48:37:20:21:fd:a2:9f:58:
37:66:da:8e:1c:87:91:13:d1:10:84:e5:dd:86:7d:
7b:d9:b5:26:1b:e2:ab:9e:6a:98:59:6a:8a:44:64:
fa:0a:4b:e0:e0:eb:b8:b7:bc:04:9a:2a:e8:16:4e:
92:8b:70:49:4d:d5:d8:6a:7d:81:06:fa:dd:b6:8e:
ff:6b:47:9d:76:9b:55:24:fe:a0:0f:a0:94:96:31:
c4:05:50:67:0f:37:ea:2b:2f:fd:f1:e6:c9:aa:1f:
f9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C6:FD:36:73:1C:CB:A7:96:BA:B3:65:03:C3:07:54:31:9F:42:3E
X509v3 Authority Key Identifier:
keyid:B1:D2:E6:81:FF:23:DD:DF:3D:51:78:58:E1:C6:4A:1D:AD:29:87:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sdLmgf8j3d89UXhY4cZKHa0phyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d568ed-1780-4d60-a6f7-5a8360dea3a3/1/sdLmgf8j3d89UXhY4cZKHa0phyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d568ed-1780-4d60-a6f7-5a8360dea3a3/1/sdLmgf8j3d89UXhY4cZKHa0phyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:4d:09:a8:75:fe:4a:01:bc:18:e6:8c:a7:3f:a2:e9:c1:10:
75:4d:2e:fc:a4:17:76:fb:9b:77:0e:6a:59:c0:77:79:b0:65:
53:b8:21:91:21:1a:06:ca:86:14:9f:d6:df:d6:b2:66:c5:49:
b0:2c:55:46:68:c4:c9:d3:8a:41:06:e5:0c:79:60:76:10:30:
4c:8d:26:1d:46:9d:f7:5b:73:a0:93:96:1e:ab:9e:4e:e3:d6:
33:c5:c0:87:0d:67:e6:78:54:54:c3:e8:f4:99:4a:52:2c:09:
0b:17:4c:02:52:7c:38:b0:36:81:c2:81:a1:db:1a:fe:e0:05:
0f:92:2c:2a:c0:02:96:46:ac:f6:bc:37:2b:d3:25:9c:86:a6:
d5:8a:a0:7b:82:fa:43:c0:4f:bb:d4:bd:c9:2d:8f:9a:11:6d:
73:36:d9:13:19:b4:8d:be:20:6d:d7:d0:8f:63:de:f4:24:d6:
9d:25:19:a4:97:56:95:da:30:32:36:ee:69:9d:14:96:c7:4d:
30:45:42:f4:91:ac:88:48:52:ee:1d:7f:b8:cb:49:4f:5a:4a:
ae:6f:0f:94:92:83:13:ee:64:05:b4:a3:07:55:7d:4b:51:45:
88:1f:81:5b:5d:4b:10:87:75:81:05:51:21:05:2a:56:d6:98:
47:df:1d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 23:11:55 2025 by rpki-client